Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=
Subject key identifier:   1F:0B:6D:15:5E:82:74:28:CE:72:59:8C:12:B7:4E:A6:8B:52:8F:E2
Certificate issuer:       /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800
Certificate serial:       77989921897707112490E7FB8EE5D3B0DE7D0CC6
Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa
Signing time:             Sun 03 May 2026 02:13:01 +0000
ROA not before:           Sun 03 May 2026 02:08:01 +0000
ROA not after:            Sun 02 May 2027 02:13:01 +0000
asID:                     135636
IP address blocks:        103.125.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl
                          rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:98:99:21:89:77:07:11:24:90:e7:fb:8e:e5:d3:b0:de:7d:0c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800
        Validity
            Not Before: May  3 02:08:01 2026 GMT
            Not After : May  2 02:13:01 2027 GMT
        Subject: CN=1F0B6D155E827428CE72598C12B74EA68B528FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:32:54:b1:88:1d:48:80:2f:f6:2c:e5:42:
                    b8:ce:35:11:3c:0e:fe:86:49:c1:c4:b8:b1:a3:9a:
                    cb:af:bc:42:00:c9:01:f9:25:10:f8:2c:d8:fc:9e:
                    01:78:a9:19:33:e1:26:60:e8:49:38:ba:65:f7:80:
                    97:40:49:a5:03:86:82:de:b0:b4:7c:8d:88:5e:42:
                    0f:84:b7:56:4b:12:19:82:a7:15:a7:3d:b6:08:b7:
                    8b:dd:ca:48:43:db:78:81:cc:0d:3d:25:60:a3:bb:
                    d2:99:c0:2f:81:d0:c4:d3:65:63:fd:9d:b5:b5:01:
                    24:74:92:7e:75:14:2c:7d:a5:8e:47:34:b6:3d:57:
                    5d:79:f0:99:d6:39:1f:11:80:da:85:6f:a9:57:f8:
                    d8:3a:28:5b:71:5d:ce:0a:1b:83:81:0a:32:4e:95:
                    24:c6:37:eb:ef:23:11:28:13:d5:51:91:4e:af:9d:
                    f0:49:08:4c:52:a3:fe:0a:dd:45:30:06:10:17:33:
                    5b:21:56:44:61:e4:e8:ff:3a:d0:cb:90:f6:2d:36:
                    73:ef:25:c0:87:ab:53:76:32:13:ec:8a:0f:36:a0:
                    b7:fb:d1:5a:1b:bd:1c:27:47:6f:ea:3f:84:d3:2f:
                    71:dc:fe:df:da:bb:a1:f6:93:c3:7b:24:51:16:9b:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:6D:15:5E:82:74:28:CE:72:59:8C:12:B7:4E:A6:8B:52:8F:E2
            X509v3 Authority Key Identifier:
                keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:1d:db:1f:16:c4:7e:7a:d5:68:6d:2b:6b:6c:16:7d:25:c6:
         dd:c6:85:3f:e2:36:98:41:58:59:7c:97:b4:d2:e7:be:c1:59:
         17:dd:7f:10:d2:f0:53:7a:79:65:ee:41:d5:ca:b1:e2:8c:7a:
         71:5c:32:24:49:17:73:97:9b:08:a3:4a:1e:e7:eb:55:76:06:
         67:f1:f9:bf:5b:23:eb:8f:bc:b9:1b:c6:8a:15:e2:93:29:bc:
         51:52:46:04:bb:3d:13:85:03:52:c8:60:f1:83:dc:04:05:2b:
         fe:a2:3d:6c:63:cc:1e:09:5c:b0:ef:ae:01:46:56:6c:00:84:
         df:9c:1e:bb:e7:84:ae:43:b0:04:7d:39:ea:85:91:85:51:f2:
         e1:71:cd:58:fe:35:37:f7:9c:6d:9a:f1:28:c1:9d:d5:cb:2b:
         07:c3:e9:85:a9:81:89:21:44:9c:e1:bd:ad:d1:ab:06:fa:bb:
         20:8c:e0:0f:f9:3e:95:0c:a8:76:6d:85:70:12:d1:1a:71:24:
         8d:26:a7:9f:54:75:0f:ba:c6:84:52:d8:58:c2:fa:d0:88:46:
         79:63:4e:1b:6d:23:14:41:56:b2:a0:19:73:82:76:d5:e0:36:
         a2:af:5e:10:9f:df:02:b5:3e:b4:dc:e8:19:f4:d2:a4:2b:46:
         31:90:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:09 2026 by rpki-client